CVE-2002-0684

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507
http://marc.info/?l=bugtraq&m=102581482511612&w=2
http://rhn.redhat.com/errata/RHSA-2002-139.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/542971US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507
http://marc.info/?l=bugtraq&m=102581482511612&w=2
http://rhn.redhat.com/errata/RHSA-2002-139.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/542971US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-06857.5Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0 CVE-2002-06867.5Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbit CVE-2002-06875.0The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.CVE-2002-06887.5ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictio CVE-2002-069010.0Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTT CVE-2002-06917.5Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a l CVE-2002-06927.5Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers t CVE-2002-06937.5Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 CVE-2002-06947.5The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000,CVE-2002-06957.5Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7 CVE-2002-06967.5Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual F CVE-2002-069710.0Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien